Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior
Críticas / altas1273▼ 220 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior
183 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 0.49% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 19/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.49% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 19/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.49% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 19/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.49% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 19/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.52% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 19/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.49% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 19/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.49% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 19/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.49% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 19/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.49% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 19/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.49% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 19/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.73% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 16/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.73% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 16/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.73% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 16/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.73% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 16/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.73% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 16/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.73% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 16/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.73% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 16/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (4.3) | 0.95% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 16/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to disclose low level confidentiality information. Exploitation of this issue does not require user… | |
| Modificada | Media (5.4) | 0.73% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 16/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.73% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 16/12/2022 | 17/6/2026 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. | |
| Modificada | Media (5.4) | 0.61% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 23/9/2022 | 17/6/2026 | Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation… | |
| Modificada | Media (5.4) | 0.86% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 23/9/2022 | 17/6/2026 | Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation… | |
| Modificada | Media (6.1) | 1.4% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 13/1/2022 | 17/6/2026 | AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a reflected Cross-Site Scripting (XSS) vulnerability via the itemResourceType parameter. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within… | |
| Modificada | Media (6.1) | 1.6% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 13/1/2022 | 17/6/2026 | AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page… | |
| Modificada | Media (6.1) | 1.6% | — | Adobe Experience ManagerAdobe Experience Manager Cloud Service | 13/1/2022 | 17/6/2026 | AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page… |